Properly escape XML content.